Is the NT Authority\nework SERVICE or NT AUTHORITY\SYSTEM selected for SQL Server 2008 installation?
Is the NT Authority\nework SERVICE or NT AUTHORITY\SYSTEM selected for SQL Server 2008 installation?
Is the Ntauthority\network service selected for all SQL Server services using the same account "servers account", but the "SQL Server Database" account name in the service is selected ntauthority\ SYSTEM?
What is the difference between using Ntauthority\system account and using Ntauthority\network service account?
------Solution--------------------
See the actual need, if in the domain, in favor of domain management, the use of domain accounts, if it is local management, there is a local built-in account
------Solution--------------------
NT AUTHORITY\SYSTEM is generally used
Other accounts are used for security reasons ... Without this consideration, use the system user.
------Solution--------------------
NT Authority\System, the system built-in account, the local system has full control, in workgroup mode, the account is not network resources, usually used for service operation, do not require a password.
NT authority\network Service, the system built-in account, less than the permissions of the systems account, access to limited local system resources, in workgroup mode, the account can use the computer's credentials to access network resources, the default is the remote server's EVERYONE and Authenticated the USER group, which is typically used for service runs and does not require a password.
NT authority\local Service, System built-in account, less than network Service account permissions, access to limited local system resources, in workgroup mode, the account can only access network resources anonymously, usually used for service operation, no password required.
For SQL SERVER Services,
If you are in a domain environment, you should select a domain account as the service account so that SQL Server can access network resources (you need to assign the relevant permissions), for example, you can have the Publisher and Subscribers share a domain account when designing replication, so that services can access each other's resources. And a domain account can not have to be a member of the local Administrators group, so that it does not have excessive permissions and is advantageous for system security.
In a workgroup environment, you typically choose the system account as the service account, but because of the large permissions of the system account, this poses unnecessary security issues for the systems, such as users can do whatever they like with xp_cmdshell. Therefore, it is recommended that you select a local user account as the service account.
For the SQL Server Agent service,
You can use domain accounts, local accounts (which do not support cluster and domain environments), Local system accounts (which do not support clustering and access network resources in workgroup mode), and Network service accounts (which do not support cluster and domain environments) as service accounts.
Is the NT Authority\nework SERVICE or NT AUTHORITY\SYSTEM selected for SQL Server 2008 installation?
